Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
File: 0y0esOyO9aIwRXqXAueqOWhYGAw.mft (raw, json)
Hash identifier: 8GBikgcgQ6ZdixKkKCX8GrpIkhnBYEdDBtxCRStOrws=
Subject key identifier: D8:66:E3:02:13:00:6F:85:0F:E3:8C:E7:E6:61:18:67:8D:88:28:0E
Authority key identifier: D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C
Certificate issuer: /CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
Certificate serial: 019A7112C0CA61EC9BBD70529EBE3FCE5A99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
Manifest number: 0B2D
Signing time: Tue 11 Nov 2025 04:00:45 +0000
Manifest this update: Tue 11 Nov 2025 04:00:45 +0000
Manifest next update: Wed 12 Nov 2025 04:00:45 +0000
Files and hashes: 1: 0y0esOyO9aIwRXqXAueqOWhYGAw.crl (hash: X8K3Fi6+hhybfrSvJTSt2zt8BjBD71Z17DlR5JPSzwU=)
2: sK3ZBrWvjwd-LkmXtEXI8mmDAIM.roa (hash: OKskFb0lNjQYUF2WZOv8rV/0FbI0umbg74GYmLaJ8S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:c0:ca:61:ec:9b:bd:70:52:9e:be:3f:ce:5a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
Validity
Not Before: Nov 11 04:00:45 2025 GMT
Not After : Nov 12 04:00:45 2025 GMT
Subject: CN=d866e30213006f850fe38ce7e66118678d88280e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:c4:70:82:eb:bf:d6:71:fc:b2:e2:d2:9f:
1d:7d:10:6b:1a:f7:00:61:66:51:77:54:11:65:c4:
4d:0e:c5:b8:b2:47:39:92:40:ef:7a:22:1e:3d:56:
a1:45:8b:57:15:ab:6d:be:a1:a1:60:6c:64:b4:d5:
fc:4b:58:ea:eb:10:39:46:2d:83:f1:ef:b8:74:07:
df:1b:bd:57:af:e7:a3:75:d1:15:9e:36:23:3a:74:
e5:e0:23:dc:05:67:bb:18:f9:62:a6:89:59:b6:d5:
64:34:ff:e9:68:84:19:2f:b5:ff:07:c7:5b:01:88:
c4:ce:78:77:02:8e:ed:b6:71:cb:0b:3b:80:3d:95:
b9:dd:f7:c7:eb:64:0d:9e:6e:fe:7d:7f:3b:07:41:
3a:75:1c:31:df:8f:90:bc:ab:b1:5e:33:75:fa:c3:
34:78:bf:64:14:b0:10:1d:49:5e:d3:1a:a7:8d:38:
9c:8a:cc:93:ad:9b:62:26:34:59:34:24:56:88:e6:
1c:e3:48:56:57:56:e7:51:f8:35:c1:3e:77:99:8f:
54:17:ac:04:df:88:fa:47:e4:cb:a4:55:6d:d1:01:
91:d1:a5:cc:7f:3b:1f:22:87:6c:26:ff:c3:d1:3d:
49:0e:c6:5c:0f:2d:c2:63:b2:41:35:3b:3d:6f:74:
14:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:66:E3:02:13:00:6F:85:0F:E3:8C:E7:E6:61:18:67:8D:88:28:0E
X509v3 Authority Key Identifier:
keyid:D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b1:79:4f:64:9e:5d:5d:b4:9f:78:1a:22:4b:f8:17:5f:98:
d1:dc:c3:07:b0:96:1e:ae:34:c4:55:99:f5:5f:fb:5c:fc:e1:
9d:67:0f:0c:fc:b2:cd:07:82:f9:0a:d2:79:de:72:52:23:e3:
0c:d1:94:32:c2:2f:43:7c:3d:c3:7b:fb:37:cd:30:1c:1c:86:
8a:f2:00:b9:28:47:73:8f:78:44:6d:10:7b:1c:1e:5d:95:60:
f5:57:88:66:72:12:c2:7b:89:66:6e:8f:18:ad:f7:f0:49:11:
39:b9:32:b5:fd:d9:a4:b8:9e:09:ec:73:47:a5:a8:b5:89:e0:
df:7d:6c:8f:02:4e:8b:e2:d7:b2:a3:49:38:e5:a8:23:e4:96:
07:67:7f:9e:8c:23:ff:a6:80:15:c1:d1:e0:98:da:9c:02:98:
da:60:70:b0:f6:0f:b0:c4:9b:ab:28:78:57:2e:ea:51:ff:d7:
7f:33:94:0a:fc:83:a8:fa:97:28:78:e2:6f:5a:51:b0:c0:5f:
c2:ca:ea:20:88:82:a3:dc:9e:17:b4:47:af:13:06:12:af:6f:
67:7e:4e:b1:41:76:fa:58:72:15:84:bf:11:af:d2:88:3b:cc:
52:f1:27:93:04:89:08:bb:41:99:c2:ef:56:fb:b3:ea:0f:82:
d7:a8:e5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:39 2025 by rpki-client